Skip to content
OpenAdvisories

Package · Hex

oidcc

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-75759

    Encrypted ID token or JARM response accepted without a nested signature in erlef oidcc

    Improper Verification of Cryptographic Signature vulnerability in erlef oidcc allows an unauthenticated attacker to impersonate an arbitrary user via an encrypted ID token or JARM response carrying no nested signature. OpenID Connect Core 1.0 section 2 requir…

    erlef oidcc oidcc Hex